Hi Dear Friends.i need your help.i want to connect cisco 7962G phone to yeastar pbx.i configure option 150 on dhcp server. configure tftp server add sepmac.xml file.phone read xml file but not connect to Yeastar see attached file plz
and i capture and open this file with wireshark
here 192.168.50.250 Yeastar
172.18.5.150 Cisco 7962G
None of this is related to FreePBX. You should try Yeastar’s forums.
Maybe can anyone understand wireshark messages? You are right this is for frerPbx. But this problem is general
Well it’s looking for the wrong file. Start there.
Which file wrong?
It’s requesting SEP<macaddress>.cnf.xml you said you had SEP<macaddress>.xml created. These are not the same file names. Plus the wireshark is a screenshot which doesn’t have all the responses…
Your filter should be ip.addr==172.18.5.150.
Hi.
172.18.5.150 ip address of cisco phone.because ip.src
but how can i resolve this problem?a lot of time i try
Someone else will need to help with this. I don’t deal with Cisco 79xx phones.
i will wait
That’s why I don’t like logs as images! We still only have one side of the dialogues
Dear David, if you want i can send pkap file to you
Put the .pcap file into a .tgz (or just rename it to packetcapture1.tgz) and attach it to your post using the upload button.
Sorry i cannot add file here because add link donwload it
I don’t understand. You should be attaching a file, not a link to a file.
The link you posted shows a virus (perhaps falsely detected).
The file should be a .tgz, not .tgz.tar
What happens when you use the upload button, or when you drag the .tgz file to your posting window?
If both fail, please use a mainstream service (Dropbox, Google Drive, etc.) Possibly WeTransfer is corrupting the data.
download here. i cannot upload file sorry.this site dont recognize these files
The four TCP connection requests are reset/refused.
The first three TFTP transfers fail: no such file. The last one, for SEP5017FF96B399.cnf.xml succeeds.
I’m not familiar with the devices so I don’t know whether the lack of the first three files is important, or whether the last file is correct.
No. Time Source Destination Protocol Length Info
2125 07:01:02.480931 172.18.5.150 192.168.50.250 TCP 60 53025 → 6970 [SYN] Seq=0 Win=8192 Len=0 MSS=1340
Frame 2125: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Routerbo_d0:fc:37 (b8:69:f4:d0:fc:37), Dst: XiamenYe_f2:e7:6c (f4:b5:49:f2:e7:6c)
Internet Protocol Version 4, Src: 172.18.5.150, Dst: 192.168.50.250
Transmission Control Protocol, Src Port: 53025, Dst Port: 6970, Seq: 0, Len: 0
No. Time Source Destination Protocol Length Info
2126 07:01:02.481050 192.168.50.250 172.18.5.150 TCP 54 6970 → 53025 [RST, ACK] Seq=1 Ack=1 Win=0 Len=0
Frame 2126: 54 bytes on wire (432 bits), 54 bytes captured (432 bits)
Ethernet II, Src: XiamenYe_f2:e7:6c (f4:b5:49:f2:e7:6c), Dst: Routerbo_d0:fc:37 (b8:69:f4:d0:fc:37)
Internet Protocol Version 4, Src: 192.168.50.250, Dst: 172.18.5.150
Transmission Control Protocol, Src Port: 6970, Dst Port: 53025, Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Length Info
2127 07:01:02.544192 172.18.5.150 192.168.50.250 TFTP 73 Read Request, File: CTLSEP5017FF96B399.tlv, Transfer type: octet
Frame 2127: 73 bytes on wire (584 bits), 73 bytes captured (584 bits)
Ethernet II, Src: Routerbo_d0:fc:37 (b8:69:f4:d0:fc:37), Dst: XiamenYe_f2:e7:6c (f4:b5:49:f2:e7:6c)
Internet Protocol Version 4, Src: 172.18.5.150, Dst: 192.168.50.250
User Datagram Protocol, Src Port: 53001, Dst Port: 69
Trivial File Transfer Protocol
No. Time Source Destination Protocol Length Info
2128 07:01:02.545243 192.168.50.250 172.18.5.150 TFTP 61 Error Code, Code: File not found, Message: File not found
Frame 2128: 61 bytes on wire (488 bits), 61 bytes captured (488 bits)
Ethernet II, Src: XiamenYe_f2:e7:6c (f4:b5:49:f2:e7:6c), Dst: Routerbo_d0:fc:37 (b8:69:f4:d0:fc:37)
Internet Protocol Version 4, Src: 192.168.50.250, Dst: 172.18.5.150
User Datagram Protocol, Src Port: 32847, Dst Port: 53001
Trivial File Transfer Protocol
No. Time Source Destination Protocol Length Info
2129 07:01:02.613066 172.18.5.150 192.168.50.250 TCP 60 49971 → 6970 [SYN] Seq=0 Win=8192 Len=0 MSS=1340
Frame 2129: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Routerbo_d0:fc:37 (b8:69:f4:d0:fc:37), Dst: XiamenYe_f2:e7:6c (f4:b5:49:f2:e7:6c)
Internet Protocol Version 4, Src: 172.18.5.150, Dst: 192.168.50.250
Transmission Control Protocol, Src Port: 49971, Dst Port: 6970, Seq: 0, Len: 0
No. Time Source Destination Protocol Length Info
2130 07:01:02.613217 192.168.50.250 172.18.5.150 TCP 54 6970 → 49971 [RST, ACK] Seq=1 Ack=1 Win=0 Len=0
Frame 2130: 54 bytes on wire (432 bits), 54 bytes captured (432 bits)
Ethernet II, Src: XiamenYe_f2:e7:6c (f4:b5:49:f2:e7:6c), Dst: Routerbo_d0:fc:37 (b8:69:f4:d0:fc:37)
Internet Protocol Version 4, Src: 192.168.50.250, Dst: 172.18.5.150
Transmission Control Protocol, Src Port: 6970, Dst Port: 49971, Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Length Info
2131 07:01:02.665466 172.18.5.150 192.168.50.250 TFTP 73 Read Request, File: ITLSEP5017FF96B399.tlv, Transfer type: octet
Frame 2131: 73 bytes on wire (584 bits), 73 bytes captured (584 bits)
Ethernet II, Src: Routerbo_d0:fc:37 (b8:69:f4:d0:fc:37), Dst: XiamenYe_f2:e7:6c (f4:b5:49:f2:e7:6c)
Internet Protocol Version 4, Src: 172.18.5.150, Dst: 192.168.50.250
User Datagram Protocol, Src Port: 51581, Dst Port: 69
Trivial File Transfer Protocol
No. Time Source Destination Protocol Length Info
2132 07:01:02.666412 192.168.50.250 172.18.5.150 TFTP 61 Error Code, Code: File not found, Message: File not found
Frame 2132: 61 bytes on wire (488 bits), 61 bytes captured (488 bits)
Ethernet II, Src: XiamenYe_f2:e7:6c (f4:b5:49:f2:e7:6c), Dst: Routerbo_d0:fc:37 (b8:69:f4:d0:fc:37)
Internet Protocol Version 4, Src: 192.168.50.250, Dst: 172.18.5.150
User Datagram Protocol, Src Port: 39629, Dst Port: 51581
Trivial File Transfer Protocol
No. Time Source Destination Protocol Length Info
2133 07:01:02.739867 172.18.5.150 192.168.50.250 TCP 60 52956 → 6970 [SYN] Seq=0 Win=8192 Len=0 MSS=1340
Frame 2133: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Routerbo_d0:fc:37 (b8:69:f4:d0:fc:37), Dst: XiamenYe_f2:e7:6c (f4:b5:49:f2:e7:6c)
Internet Protocol Version 4, Src: 172.18.5.150, Dst: 192.168.50.250
Transmission Control Protocol, Src Port: 52956, Dst Port: 6970, Seq: 0, Len: 0
No. Time Source Destination Protocol Length Info
2134 07:01:02.739986 192.168.50.250 172.18.5.150 TCP 54 6970 → 52956 [RST, ACK] Seq=1 Ack=1 Win=0 Len=0
Frame 2134: 54 bytes on wire (432 bits), 54 bytes captured (432 bits)
Ethernet II, Src: XiamenYe_f2:e7:6c (f4:b5:49:f2:e7:6c), Dst: Routerbo_d0:fc:37 (b8:69:f4:d0:fc:37)
Internet Protocol Version 4, Src: 192.168.50.250, Dst: 172.18.5.150
Transmission Control Protocol, Src Port: 6970, Dst Port: 52956, Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Length Info
2135 07:01:02.786309 172.18.5.150 192.168.50.250 TFTP 62 Read Request, File: ITLFile.tlv, Transfer type: octet
Frame 2135: 62 bytes on wire (496 bits), 62 bytes captured (496 bits)
Ethernet II, Src: Routerbo_d0:fc:37 (b8:69:f4:d0:fc:37), Dst: XiamenYe_f2:e7:6c (f4:b5:49:f2:e7:6c)
Internet Protocol Version 4, Src: 172.18.5.150, Dst: 192.168.50.250
User Datagram Protocol, Src Port: 52179, Dst Port: 69
Trivial File Transfer Protocol
No. Time Source Destination Protocol Length Info
2136 07:01:02.787342 192.168.50.250 172.18.5.150 TFTP 61 Error Code, Code: File not found, Message: File not found
Frame 2136: 61 bytes on wire (488 bits), 61 bytes captured (488 bits)
Ethernet II, Src: XiamenYe_f2:e7:6c (f4:b5:49:f2:e7:6c), Dst: Routerbo_d0:fc:37 (b8:69:f4:d0:fc:37)
Internet Protocol Version 4, Src: 192.168.50.250, Dst: 172.18.5.150
User Datagram Protocol, Src Port: 48365, Dst Port: 52179
Trivial File Transfer Protocol
No. Time Source Destination Protocol Length Info
2159 07:01:03.029289 172.18.5.150 192.168.50.250 TCP 60 51128 → 6970 [SYN] Seq=0 Win=8192 Len=0 MSS=1340
Frame 2159: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Routerbo_d0:fc:37 (b8:69:f4:d0:fc:37), Dst: XiamenYe_f2:e7:6c (f4:b5:49:f2:e7:6c)
Internet Protocol Version 4, Src: 172.18.5.150, Dst: 192.168.50.250
Transmission Control Protocol, Src Port: 51128, Dst Port: 6970, Seq: 0, Len: 0
No. Time Source Destination Protocol Length Info
2160 07:01:03.029406 192.168.50.250 172.18.5.150 TCP 54 6970 → 51128 [RST, ACK] Seq=1 Ack=1 Win=0 Len=0
Frame 2160: 54 bytes on wire (432 bits), 54 bytes captured (432 bits)
Ethernet II, Src: XiamenYe_f2:e7:6c (f4:b5:49:f2:e7:6c), Dst: Routerbo_d0:fc:37 (b8:69:f4:d0:fc:37)
Internet Protocol Version 4, Src: 192.168.50.250, Dst: 172.18.5.150
Transmission Control Protocol, Src Port: 6970, Dst Port: 51128, Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Length Info
2162 07:01:03.074974 172.18.5.150 192.168.50.250 TFTP 74 Read Request, File: SEP5017FF96B399.cnf.xml, Transfer type: octet
Frame 2162: 74 bytes on wire (592 bits), 74 bytes captured (592 bits)
Ethernet II, Src: Routerbo_d0:fc:37 (b8:69:f4:d0:fc:37), Dst: XiamenYe_f2:e7:6c (f4:b5:49:f2:e7:6c)
Internet Protocol Version 4, Src: 172.18.5.150, Dst: 192.168.50.250
User Datagram Protocol, Src Port: 49157, Dst Port: 69
Trivial File Transfer Protocol
No. Time Source Destination Protocol Length Info
2163 07:01:03.080960 192.168.50.250 172.18.5.150 TFTP 558 Data Packet, Block: 1
Frame 2163: 558 bytes on wire (4464 bits), 558 bytes captured (4464 bits)
Ethernet II, Src: XiamenYe_f2:e7:6c (f4:b5:49:f2:e7:6c), Dst: Routerbo_d0:fc:37 (b8:69:f4:d0:fc:37)
Internet Protocol Version 4, Src: 192.168.50.250, Dst: 172.18.5.150
User Datagram Protocol, Src Port: 58395, Dst Port: 49157
Trivial File Transfer Protocol
Data (512 bytes)
The remaining packets are the contents of the last file interleaved with acknowledgements, and then the cycle seems to repeat.
The last file contains the following (I have redacted obvious non-empty passwords, and removed binary data from the beginning and end of packets):
<device>
<deviceProtocol>SIP</deviceProtocol>
<sshUserId>cisco</sshUserId>
<sshPassword>REDACTED</sshPassword>
<devicePool>
<dateTimeSetting>
<dateTemplate>M/D/Ya</dateTemplate>
<timeZone>Eastern Standard/Daylight Time</timeZone>
<ntps>
<ntp>
<name>0.centos.pool.ntp.org</name>
<ntpMode>Unicast</ntpMode>
</ntp>
</ntps>
</dateTimeSetting>
<callManagerGroup>
<members>
<member priority="0">
<callManager>
<ports>
<ethernetPhonePort>2000</ethernetPhonePort>
<sipPort>5060</sipPort>
<securedSipPort>5061</securedSipPort>
</ports>
<processNodeName>192.168.50.250</processNodeName>
</callManager>
</member>
</members>
</callManagerGroup>
</devicePool>
<sipProfile>
<sipProxies>
<backupProxy></backupProxy>
<backupProxyPort></backupProxyPort>
<emergencyProxy></emergencyProxy>
<emergencyProxyPort></emergencyProxyPort>
<outboundProxy></outboundProxy>
<outboundProxyPort></outboundProxyPort>
<registerWithProxy>true</registerWithProxy>
</sipProxies>
<sipCallFeatures>
<cnfJoinEnabled>true</cnfJoinEnabled>
<callForwardURI>x-serviceuri-cfwdall</callForwardURI>
<callPickupURI>x-cisco-serviceuri-pickup</callPickupURI>
<callPickupListURI>x-cisco-serviceuri-opickup</callPickupListURI>
<callPickupGroupURI>x-cisco-serviceuri-gpickup</callPickupGroupURI>
<meetMeServiceURI>x-cisco-serviceuri-meetme</meetMeServiceURI>
<abbreviatedDialURI>x-cisco-serviceuri-abbrdial</abbreviatedDialURI>
<rfc2543Hold>false</rfc2543Hold>
<callHoldRingback>2</callHoldRingback>
<localCfwdEnable>true</localCfwdEnable>
<semiAttendedTransfer>true</semiAttendedTransfer>
<anonymousCallBlock>2</anonymousCallBlock>
<callerIdBlocking>2</callerIdBlocking>
<dndControl>0</dndControl>
<remoteCcEnable>true</remoteCcEnable>
</sipCallFeatures>
<sipStack>
<sipInviteRetx>6</sipInviteRetx>
<sipRetx>10</sipRetx>
<timerInviteExpires>180</timerInviteExpires>
<timerRegisterExpires>3600</timerRegisterExpires>
<timerRegisterDelta>5</timerRegisterDelta>
<timerKeepAliveExpires>120</timerKeepAliveExpires>
<timerSubscribeExpires>120</timerSubscribeExpires>
<timerSubscribeDelta>5</timerSubscribeDelta>
<timerT1>500</timerT1>
<timerT2>4000</timerT2>
<maxRedirects>70</maxRedirects>
<remotePartyID>true</remotePartyID>
<userInfo>None</userInfo>
</sipStack>
<autoAnswerTimer>1</autoAnswerTimer>
<autoAnswerAltBehavior>false</autoAnswerAltBehavior>
<autoAnswerOverride>true</autoAnswerOverride>
<transferOnhookEnabled>false</transferOnhookEnabled>
<enableVad>false</enableVad>
<preferredCodec>g711ulaw</preferredCodec>
<dtmfAvtPayload>101</dtmfAvtPayload>
<dtmfDbLevel>3</dtmfDbLevel>
<dtmfOutofBand>avt</dtmfOutofBand>
<alwaysUsePrimeLine>false</alwaysUsePrimeLine>
<alwaysUsePrimeLineVoiceMail>false</alwaysUsePrimeLineVoiceMail>
<kpml>3</kpml>
<natEnabled>false</natEnabled>
<natAddress></natAddress>
<phoneLabel>100</phoneLabel>
<stutterMsgWaiting>0</stutterMsgWaiting>
<callStats>false</callStats>
<silentPeriodBetweenCallWaitingBursts>10</silentPeriodBetweenCallWaitingBursts>
<disableLocalSpeedDialConfig>false</disableLocalSpeedDialConfig>
<startMediaPort>16384</startMediaPort>
<stopMediaPort>32766</stopMediaPort>
<sipLines>
<line button="1">
<featureID>9</featureID>
<featureLabel>100</featureLabel>
<proxy>USECALLMANAGER</proxy>
<port>5060</port>
<name>100</name>
<displayName>100</displayName>
<autoAnswer>
<autoAnswerEnabled>2</autoAnswerEnabled>
</autoAnswer>
<callWaiting>3</callWaiting>
<authName>100</authName>
<authPassword>REDACTED</authPassword>
<sharedLine>false</sharedLine>
<messageWaitingLampPolicy>1</messageWaitingLampPoli... ...
cy>
<messagesNumber>*97</messagesNumber>
<ringSettingIdle>4</ringSettingIdle>
<ringSettingActive>5</ringSettingActive>
<contact>100</contact>
<forwardCallInfoDisplay>
<callerName>true</callerName>
<callerNumber>true</callerNumber>
<redirectedNumber>false</redirectedNumber>
<dialedNumber>true</dialedNumber>
</forwardCallInfoDisplay>
</line>
</sipLines>
<voipControlPort>5060</voipControlPort>
<dscpForAudio>184</dscpForAudio>
<ringSettingBusyStationPolicy>0</ringSettingBusyStationPolicy>
<dialTemplate>dialplan.xml</dialTemplate>
</sipProfile>
<commonProfile>
<phonePassword></phonePassword>
<backgroundImageAccess>true</backgroundImageAccess>
<callLogBlfEnabled>1</callLogBlfEnabled>
</commonProfile>
<loadInformation>apps42.9-4-2ES26</loadInformation>
<vendorConfig>
<disableSpeaker>false</disableSpeaker>
<disableSpeakerAndHeadset>false</disableSpeakerAndHeadset>
<pcPort>0</pcPort>
<settingsAccess>1</settingsAccess>
<garp>0</garp>
<voiceVlanAccess>0</voiceVlanAccess>
<videoCapability>0</videoCapability>
<autoSelectLineEnable>0</autoSelectLineEnable>
<webAccess>0</webAccess>
<spanToPCPort>1</spanToPCPort>
<loggingDisplay>1</loggingDisplay>
<loadServer></loadServer>
</vendorConfig>
<versionStamp>1143565489-a3cbf294-7526-4c29-8791-c4fce4ce4c37</versionStamp>
<networkLocale>United_States</networkLocale>
<networkLocaleInfo>
<name>United_States</name>
<uid>64</uid>
<version>1.0.0.0-1</version>
</networkLocaleInfo>
<deviceSecurityMode>1</deviceSecurityMode>
<authenticationURL></authenticationURL>
<directoryURL></directoryURL>
<idleURL></idleURL>
<informationURL></informationURL>
<messagesURL></messagesURL>
<proxyServerURL></proxyServerURL>
<servicesURL></servicesURL>
<dscpForSCCPPhoneConfig>96</dscpForSCCPPhoneConfig>
<dscpForSCCPPhoneServices>0</dscpForSCCPPhoneServices>
<dscpForCm2Dvce>96</dscpForCm2Dvce>
<transportLayerProtocol>2</transportLayerProtocol>
<capfAuthMode>0</capfAuthMode>
<capfList>
<capf>
<phonePort>3804</phonePort>
</capf>
</capfList>
<certHash></certHash>
<encrConfig>false</encrConfig>
</device>
A couple of guesses:
The phone then tries to read apps42.9-4-2ES26.loads but fails to find it.
According to SEPMAC.cnf.xml , you should provide a valid firmware on the TFTP server. If you don’t have one, deleting this line might work.
The above link shows only 0 and 1 as valid entries. Do you know what 2 is supposed to do? Try setting it to 0.
If neither of the above help, review the above link for other discrepancies.
I missed that, and thought it was the start of the repeat, because it wasn’t on the screen grab. For completeness, the UDP exchange follows (there is another rejected TCP before it. I guess the phone tries TCP, to a Cisco port number, before falling back to TFTP):
No. Time Source Destination Protocol Length Info
4093 07:02:09.314088 172.18.5.150 192.168.50.250 TFTP 73 Read Request, File: CTLSEP5017FF96B399.tlv, Transfer type: octet
Frame 4093: 73 bytes on wire (584 bits), 73 bytes captured (584 bits)
Ethernet II, Src: Routerbo_d0:fc:37 (b8:69:f4:d0:fc:37), Dst: XiamenYe_f2:e7:6c (f4:b5:49:f2:e7:6c)
Internet Protocol Version 4, Src: 172.18.5.150, Dst: 192.168.50.250
User Datagram Protocol, Src Port: 52690, Dst Port: 69
Trivial File Transfer Protocol
No. Time Source Destination Protocol Length Info
4094 07:02:09.314945 192.168.50.250 172.18.5.150 TFTP 61 Error Code, Code: File not found, Message: File not found
Frame 4094: 61 bytes on wire (488 bits), 61 bytes captured (488 bits)
Ethernet II, Src: XiamenYe_f2:e7:6c (f4:b5:49:f2:e7:6c), Dst: Routerbo_d0:fc:37 (b8:69:f4:d0:fc:37)
Internet Protocol Version 4, Src: 192.168.50.250, Dst: 172.18.5.150
User Datagram Protocol, Src Port: 33994, Dst Port: 52690
Trivial File Transfer Protocol